Of Messages and Testing...

Hmmm...

Heres a thought:
  Why not build a mail-server that REQUIRES a "Delivery Confirmation" and a "Clean-Logoff" before the message is delivered to the recipient? This way a message can be checked, and delivered ONLY if 1) the Sending machine waits for the confirmation and 2) it passes the checks made on the message by whatever spam/virus checkers the server admin chooses? Doing this will help prevent "Drive By Spamming" where the spam sender hangs out long enough to send the message and then skedaddles. Also, this will allow the administrator to perform other tests on the message (including virus checks, DNS checks, RBL checks, banned user tests, etc) via whatever "Plug-Ins" they add to their server, and then the server will either pass or fail the message accordingly.

Here's an example server/client conversation with a NORMAL message:

>>> 220-Hello
<<< EHLO [email protected]
>>> 250-Greetings, here are your options:
>>> 250-AUTH CRAM-MD5 PLAIN
>>> 250-AUTH=CRAM-MD5 PLAIN
>>> 250-PIPELINING
>>> 250 8BITMIME
<<< MAIL FROM: [email protected]
>>> 250 ok
<<< RCPT TO: [email protected]
>>> 250 ok
<<< DATA
>>> 354 Send data, please wait for confirmation or MESSAGE WILL BE LOST!
<<< (a normal message)
>>> 777 Recipient good, Message Content good, Delivery successful.
<<< QUIT


Here's an example server/client conversation with a SPAM message:

>>> 220-Hello
<<< EHLO [email protected]
>>> 250-Greetings, here are your options:
>>> 250-AUTH CRAM-MD5 PLAIN
>>> 250-AUTH=CRAM-MD5 PLAIN
>>> 250-PIPELINING
>>> 250 8BITMIME
<<< MAIL FROM: [email protected]
>>> 250 ok
<<< RCPT TO: [email protected]
>>> 250 ok
<<< DATA
>>> 354 Send data, please wait for confirmation or MESSAGE WILL BE LOST!
<<< (a spam message is sent that contains spam)
>>> 666 Message FAILED one of the tests performed, Will not deliver.
<<< QUIT

If we humans have to pass tests in order to pass the class, I cant see why E-mail can't be made to "Pass the Test" before being delivered. In this day and age, a simple SMTP Style message handler just wont do anymore, and with the speed of machines these days there is no real worry anymore about using a few extra clock-cycles to check the message content.

Ray